CVE-2026-89994: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events store a pointer to a struct fsl_edma_engine in the ringbuffer and dereference it when a log entry is printed. At this time, the pointer may no longer be valid. Event injection can be used to trigger a crash: $ cd /sys/kernel/tracing $ echo 'value = 0' > events/fsl_edma/edma_writeb/inject $ cat trace The log output needs only edma->membase. Add a membase field at the end of the event and use the new field for log output. Keep the existing fields for backward compatibility.

Засегнати продукти

• Linux Linux: 11102d0c343ba06ddd303f2503c0ce46d70052f2 преди ef02cd3807f39ae1dbc924788d8fa6a85334c435; 11102d0c343ba06ddd303f2503c0ce46d70052f2 преди d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7; 11102d0c343ba06ddd303f2503c0ce46d70052f2 преди 2a3801ae5c344473e648006c5b03a9216ac54a6a; 11102d0c343ba06ddd303f2503c0ce46d70052f2 преди 2ea04dca8e627f722caa7a2037cfbae0257f3501
• Linux Linux: 6.10; преди 6.10; 6.12.110 до 6.12.*; 6.18.51 до 6.18.*; 7.2.5 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-89994
• https://nvd.nist.gov/vuln/detail/CVE-2026-89994
• https://git.kernel.org/stable/c/ef02cd3807f39ae1dbc924788d8fa6a85334c435
• https://git.kernel.org/stable/c/d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7
• https://git.kernel.org/stable/c/2a3801ae5c344473e648006c5b03a9216ac54a6a
• https://git.kernel.org/stable/c/2ea04dca8e627f722caa7a2037cfbae0257f3501